CVE-2026-63846Disclosure

LOWCVSS 7.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fence for JPEG v3.0 ring JPEG rings do not support 64-bit user fence writes, reject CS submissions with user fences. (cherry picked from commit 4d7d774f100efb5089c86a1fb8c5bf47c63fc9ef)

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-20

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • Technical details provided in 1 signal
  • Disclosure: 1 classified signal
  • 1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-07-22: 1Technical Details · 2026-07-22: 107-22
Signal classification1 categories
Disclosure
1100.0%
Full discourse1 post
  • DFIR Lab@DFIR_Lab
    Disclosure

    🚨 CVE-2026-63846 | CVSS 7.8 HIGH Linux kernel vulnerability in AMD GPU JPEG driver. Local privilege escalation possible via improper user fence handling in JPEG v3.0 rings. Affects: Linux kernel with AMD GPU support #CVE #Vulnerability #PatchNow https://t.co/QEectGxk2s

    Post summary

    This tweet announces CVE‑2026‑63846, a high‑severity local privilege escalation vulnerability in the Linux kernel’s AMD GPU JPEG driver, but provides no PoC, exploit code, or patch details.

    0000039
    88 followersView on X

Explore more